Enrollment Configuration Summary

Default Windows 10/11 Enrollment Completion Page Configuration

Platform: Windows 10/11
Type: Enrollment Status Page (ESP)
Priority: 0 (lowest — global fallback)

Description:
Default ESP applied to all users and devices, unless overridden by a higher‑priority ESP.

🎯 Purpose

This Enrollment Status Page (ESP) is a global fallback configuration designed to ensure fast, reliable Autopilot and MDM enrollment.

It does not track or enforce app installation and does not block device use during enrollment. All security controls and baseline enforcement are applied post‑enrollment as part of the IBP model.

This aligns with an IBP (Initial Baseline Protection) posture:
✔ Safe
✔ Low friction
✔ Fast onboarding
✔ No risk of Autopilot failures due to blocking apps

🧭 Assignments

Assigned to: All devices
Role Scope Tags: None

This is the expected behavior for a default ESP.

🔧 Configured ESP Behaviours

Below is each relevant setting and what it means.

1. Installation Progress UI

Setting	Value
showInstallationProgress	False

✔ No ESP progress screen shown
✔ User gets to desktop faster
✔ Good for environments without mandatory app installs

2. App Installation & Blocking Behaviour

Setting	Value	Outcome
allowNonBlockingAppInstallation	False	No apps tracked or required
selectedMobileAppIds	Empty	No required apps
blockDeviceSetupRetryByUser	False	User may retry setup
allowDeviceUseOnInstallFailure	False	But since no apps tracked, irrelevant
allowDeviceResetOnInstallFailure	False	No auto-reset
allowLogCollectionOnInstallFailure	False	No troubleshooting logs collected

📌 Interpretation:
This ESP does not block device use for any failures because it does not track or enforce app installation.

Your true IBP enforcement (like BitLocker, ASR, Edge Hardening) is done post-ESP, not during enrollment.

3. Install Quality Updates During ESP

| installQualityUpdates | False |

✔ Device does not install Windows quality updates during ESP
✔ Avoids delays and failure conditions during onboarding
✔ Recommended for IBP to keep Autopilot fast and reliable